CVE-2010-0249 Microsoft Internet Explorer
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote…
- CVSS
- 8.8 High
- EPSS
- 92%
- Percentile
- 100
- Published
- 2010-01-15
- Force
- 10 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
On CISA’s exploited list
Microsoft Internet Explorer Use-After-Free Vulnerability
- Added
- 2026-05-20
- Federal patch deadline
- 2026-06-03
- Ransomware use
- not known